# CWE-405.

Every Advisory and CVE whose sources give the weakness CWE-405, newest first.

## Records, newest first (an older page)

- [jwt-go allows excessive memory allocation during header parsing](https://agentprime.io/advisories/GHSA-mh63-6h87-95cp.md)
  `GHSA-mh63-6h87-95cp`, `CVE-2025-30204`, `GO-2025-3553` · Go `github.com/golang-jwt/jwt` and 2 more: affected `>=3.2.0, <=3.2.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 21 Mar 2025 · Tags: CWE-405
- [Possible DoS by memory exhaustion in net-imap](https://agentprime.io/advisories/GHSA-7fc5-f82f-cx69.md)
  `GHSA-7fc5-f82f-cx69`, `CVE-2025-25186` · RubyGems `net-imap`: affected `>=0.3.2, <0.3.8 || >=0.4.0, <0.4.19 || >=0.5.0, <0.5.6`, fixed in `0.3.8`, `0.4.19`, `0.5.6` · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service, CWE-405, CWE-409, CWE-1287
- [Many records in the additional section cause CPU exhaustion](https://agentprime.io/advisories/CVE-2024-11187.md)
  `CVE-2024-11187` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 29 Jan 2025 · Tags: CWE-405
- [UDP traffic amplification via fastd's fast reconnect feature](https://agentprime.io/advisories/CVE-2025-24356.md)
  `CVE-2025-24356` · CVE record: neocturne fastd · CVSS 6.9 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-405
- [Suricata oversized resource names utilizing DNS name compression can lead to resource starvation](https://agentprime.io/advisories/CVE-2024-55628.md)
  `CVE-2024-55628` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-405, CWE-779
- [Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy](https://agentprime.io/advisories/CVE-2024-56200.md)
  `CVE-2024-56200` · CVE record: nexryai altair · CVSS 8.6 High · Not analysed yet · Published 19 Dec 2024 · Tags: Denial of service, CWE-405
- [Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey](https://agentprime.io/advisories/CVE-2024-49363.md)
  `CVE-2024-49363` · CVE record: misskey-dev misskey · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Denial of service, CWE-405
- [body-parser vulnerable to denial of service when url encoding is enabled](https://agentprime.io/advisories/GHSA-qwcr-r2fm-qrc7.md)
  `GHSA-qwcr-r2fm-qrc7`, `CVE-2024-45590` · npm `body-parser`: affected `<1.20.3`, fixed in `1.20.3` · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-405
- [IBM InfoSphere Information Server denial of service](https://agentprime.io/advisories/CVE-2024-40705.md)
  `CVE-2024-40705` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: CWE-405
- [Botan has a Denial of Service Due to Excessive Name Constraints](https://agentprime.io/advisories/CVE-2024-34702.md)
  `CVE-2024-34702` · CVE record: randombit botan · CVSS 5.3 Medium · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-405
- [IBM MQ Container denial of service](https://agentprime.io/advisories/CVE-2024-39743.md)
  `CVE-2024-39743` · CVE record: IBM MQ Operator · CVSS 5.9 Medium · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-405
- [Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters](https://agentprime.io/advisories/CVE-2024-34703.md)
  `CVE-2024-34703` · CVE record: randombit botan · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2024 · Tags: Denial of service, CWE-405
- [Quoted zip-bomb protection for zipfile](https://agentprime.io/advisories/CVE-2024-0450.md)
  `CVE-2024-0450` · CVE record: Python Software Foundation CPython · CVSS 6.2 Medium · Not analysed yet · Published 19 Mar 2024 · Tags: CWE-405
- [NAVER nGrinder: nGrinder before 3.5.9 allows to set delay without limitation…](https://agentprime.io/advisories/CVE-2024-28214.md)
  `CVE-2024-28214` · CVE record: NAVER nGrinder · CVSS 2.7 Low · Not analysed yet · Published 7 Mar 2024 · Tags: CWE-405
- [An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions.](https://agentprime.io/advisories/CVE-2023-2992.md)
  `CVE-2023-2992` · CVE record: Lenovo System Management Module (SMM) and 1 more · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2023 · Tags: CWE-405
- [TYPO3 CMS vulnerable to Denial of Service in Page Error Handling](https://agentprime.io/advisories/GHSA-8c28-5mp7-v24h.md)
  `GHSA-8c28-5mp7-v24h`, `BIT-typo3-2022-23500`, `CVE-2022-23500`, `PKSA-j3x1-dtrb-kbct`, `PKSA-wh51-qtyw-9mq5` · Packagist `typo3/cms` and 1 more: affected `>=10.0.0, <10.4.33 || >=11.0.0, <11.5.20`, fixed in `10.4.33`, `11.5.20` · CVSS 5.9 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: Denial of service, CWE-405
- [OCI OpenDDS Secure Amplification](https://agentprime.io/advisories/CVE-2021-38447.md)
  `CVE-2021-38447` · CVE record: OCI OpenDDS · CVSS 8.6 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-405
- [Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings](https://agentprime.io/advisories/GHSA-jj6m-r8jc-2gp7.md)
  `GHSA-jj6m-r8jc-2gp7`, `CVE-2021-32699`, `GO-2022-0919` · Go `github.com/pterodactyl/wings`: affected `<1.4.4`, fixed in `1.4.4` · CVSS 6.5 Medium · Not analysed yet · Published 23 Jun 2021 · Tags: Denial of service, CWE-405
- [Denial of Service in Page Error Handling](https://agentprime.io/advisories/GHSA-4p9g-qgx9-397p.md)
  `GHSA-4p9g-qgx9-397p`, `BIT-typo3-2021-21359`, `CVE-2021-21359`, `PKSA-8svt-p3nh-mpwn`, `PKSA-g918-9bjy-w911` · Packagist `typo3/cms` and 1 more: affected `>=9.0.0, <9.5.25 || >=10.0.0, <10.4.14 || >=11.0.0, <11.1.1`, fixed in `9.5.25`, `10.4.14`, `11.1.1` · CVSS 5.9 Medium · Not analysed yet · Published 23 Mar 2021 · Tags: Denial of service, CWE-405
- [Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.](https://agentprime.io/advisories/CVE-2019-11479.md)
  `CVE-2019-11479` · CVE record: Linux Linux kernel · CVSS 5.3 Medium · EPSS 0.92 · Not analysed yet · Published 18 Jun 2019 · Tags: CWE-405

Newest: <https://agentprime.io/advisories/tag/cwe-405.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-405&cursor=WyIyMDI1LTA0LTI4VDE0OjE3OjMyLjAwMDAwMFoiLCJHSFNBLWozZzMtNXF2NS01Mm1qIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-405/?cursor=WyIyMDI1LTA0LTI4VDE0OjE3OjMyLjAwMDAwMFoiLCJHSFNBLWozZzMtNXF2NS01Mm1qIl0>. Everything for agents: <https://agentprime.io/llms.txt>.